Bank of Mauritius Guideline on Use of Cloud Services (2022)

Section 7: Cloud security management – Bank of Mauritius Guideline on Use of Cloud Services (2022)

Bank of Mauritius Guideline on Use of Cloud Services (2022) 7.2.xv: Operate an incident management process and centralised visibility over core cloud components

What does 7.2.xv require?

An incident management process exists that assigns each party its role and responsibilities, and the institution keeps centralised visibility and control of its core components on the cloud, including identity and access management, databases, security, encryption and keys, and backups.

Maintained by Gerard Blokdyk

Other controls in Section 7: Cloud security management – Bank of Mauritius Guideline on Use of Cloud Services (2022)

7.1 Determine security controls in line with risk appetite and the characteristics of the service
7.2.i Know the provider's security measures, assess vulnerabilities regularly and keep cloud controls at least as strong as on premise
7.2.iv Obtain assurance over the hypervisor and safeguard against virtualisation risks
7.2.vi Keep an inventory of IT assets on the cloud and apply proportionate identity, access and network controls
7.2.viii Encrypt data at rest and in transit and manage encryption keys under institution control
7.2.xi Segregate, protect and identify the institution's data
7.2.xii Secure containers, microservices and APIs
7.2.xvii Encrypt point-to-point connectivity, use dual connectivity from Mauritius and keep logs and audit trails

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Bank of Mauritius Guideline on Use of Cloud Services (2022) controls